A network authentication protocol using symmetric cryptography to provide authentication for client-server applications. The core of Kerberos architecture is the KDC (Key Distribution Server), storing authentication information and using it to securely authenticate users and services. Authentication is called “secure” because it does not occur in plaintext, it does not rely on authentication by the host operating system, it does not base trust on IP addresses, and it does not require physical security of the network hosts. For these reasons, the KDC acts as a trusted third party in performing authentication services.

See Also: Authentication; Cryptography or “Crypto”; Host; IP Addresses; Key; Security.